Arcserve records

19 published records for vendor arcserve.

Researcher profile

Entered KEV: 1 · 5.3%
Weaponized: 1 · 5.3%
Pre-auth RCE: 3
With a fix record: 0%
Median publish → KEV: 2492 days

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

19 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
85Now	CVE-2015-4068Weaponized	Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denarcserve · udp · CWE-22 Pre-auth Path traversal	Critical9.1	KEV	63.6%	May 29, 2015
52Plan	CVE-2020-27858No exploit	This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5.arcserve · d2d · CWE-611 Pre-auth XXE	High7.5	—	73.8%	Jan 20, 2021
51Plan	CVE-2023-26258Proof of concept	Arcserve UDP through 9.0.6034 allows authentication bypass.arcserve · udp · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.8	—	39.7%	Jul 3, 2023
44Plan	CVE-2023-41998No exploit	Arcserve UDP Unauthenticated RCEarcserve · udp · CWE-434 pre-auth RCE File upload	Critical9.8	—	15.2%	Nov 27, 2023
43Plan	CVE-2024-0801Proof of concept	Unauthenticated DoS in Arcserve Unified Data Protectionarcserve · udp · CWE-75 Pre-auth Denial of service	High7.5	—	41.8%	Mar 13, 2024
40Plan	CVE-2024-0799Proof of concept	Authentication Bypass via wizardLogin in Arcserve Unified Data Protectionarcserve · udp · CWE-287 Pre-auth Auth bypass	Critical9.8	—	4.3%	Mar 13, 2024
39Monitor	CVE-2023-42000No exploit	Arcserve UDP Agent Unauthenticated Path Traversal File Uploadarcserve · udp · CWE-22 Pre-auth Path traversal	Critical9.8	—	1.4%	Nov 27, 2023
39Monitor	CVE-2023-41999No exploit	Arcserve UDP Management Authentication Bypassarcserve · udp · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.4%	Nov 27, 2023
36Monitor	CVE-2025-34522No exploit	Arcserve UDP < 10.2 Pre-Authentication Heap Overflowarcserve · udp · CWE-122 pre-auth RCE Auth bypass Memory safety	Critical9.2	—	0.5%	Aug 27, 2025
36Monitor	CVE-2025-34523No exploit	Arcserve UDP < 10.2 Pre-Authentication Heap Overflowarcserve · udp · CWE-122 pre-auth RCE Auth bypass Memory safety	Critical9.2	—	0.5%	Aug 27, 2025
35Monitor	CVE-2024-0800No exploit	Authentication Bypass via wizardLogin in Arcserve Unified Data Protectionarcserve · udp · CWE-434 Auth bypass Path traversal File upload	High8.8	—	1.0%	Mar 13, 2024
32Monitor	CVE-2015-4069No exploit	The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SOarcserve · arcserve unified data protection · CWE-200 Pre-auth Info leak	High7.8	—	4.4%	May 29, 2015
31Monitor	CVE-2006-6641No exploit	Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including Bricleverpath · aion bpm Pre-auth	High7.5	—	2.5%	Dec 19, 2006
31Monitor	CVE-2018-18659No exploit	An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.arcserve · udp · CWE-611 Pre-auth XXE	High7.5	—	1.8%	Oct 26, 2018
30Monitor	CVE-2018-18657No exploit	An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.arcserve · udp · CWE-200 Pre-auth Info leak	High7.5	—	1.3%	Oct 26, 2018
30Monitor	CVE-2018-18658No exploit	An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.arcserve · udp · CWE-200 Pre-auth Info leak	High7.5	—	1.3%	Oct 26, 2018
30Monitor	CVE-2025-34520No exploit	Arcserve UDP < 10.2 Authentication Bypassarcserve · udp · CWE-288 Pre-auth Auth bypass	High7.7	—	0.3%	Aug 27, 2025
24Monitor	CVE-2018-18660No exploit	An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.arcserve · udp · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Oct 26, 2018
19Monitor	CVE-2025-34521No exploit	Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS)arcserve · udp · CWE-79 RCE XSS	Medium4.8	—	0.2%	Aug 27, 2025

CVE-2015-4068
85Now
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a den
CriticalCVSS 9.1KEVWeaponizedEPSS 63%
- Pre-auth
- Path traversal
arcserve · udpMay 29, 2015
CVE-2020-27858
52Plan
This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve D2D 16.5.
HighCVSS 7.5No exploitEPSS 73%
- Pre-auth
- XXE
arcserve · d2dJan 20, 2021
CVE-2023-26258
51Plan
Arcserve UDP through 9.0.6034 allows authentication bypass.
CriticalCVSS 9.8Proof of conceptEPSS 39%
arcserve · udpJul 3, 2023
CVE-2023-41998
44Plan
Arcserve UDP Unauthenticated RCE
CriticalCVSS 9.8No exploitEPSS 15%
- pre-auth RCE
- File upload
arcserve · udpNov 27, 2023
CVE-2024-0801
43Plan
Unauthenticated DoS in Arcserve Unified Data Protection
HighCVSS 7.5Proof of conceptEPSS 41%
- Pre-auth
- Denial of service
arcserve · udpMar 13, 2024
CVE-2024-0799
40Plan
Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
CriticalCVSS 9.8Proof of conceptEPSS 4%
- Pre-auth
- Auth bypass
arcserve · udpMar 13, 2024
CVE-2023-42000
39Monitor
Arcserve UDP Agent Unauthenticated Path Traversal File Upload
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Path traversal
arcserve · udpNov 27, 2023
CVE-2023-41999
39Monitor
Arcserve UDP Management Authentication Bypass
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
arcserve · udpNov 27, 2023
CVE-2025-34522
36Monitor
Arcserve UDP < 10.2 Pre-Authentication Heap Overflow
CriticalCVSS 9.2No exploitEPSS 0%
arcserve · udpAug 27, 2025
CVE-2025-34523
36Monitor
Arcserve UDP < 10.2 Pre-Authentication Heap Overflow
CriticalCVSS 9.2No exploitEPSS 0%
arcserve · udpAug 27, 2025
CVE-2024-0800
35Monitor
Authentication Bypass via wizardLogin in Arcserve Unified Data Protection
HighCVSS 8.8No exploitEPSS 1%
arcserve · udpMar 13, 2024
CVE-2015-4069
32Monitor
The EdgeServiceImpl web service in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive credentials via a crafted SO
HighCVSS 7.8No exploitEPSS 4%
- Pre-auth
- Info leak
arcserve · arcserve unified data protectionMay 29, 2015
CVE-2006-6641
31Monitor
Unspecified vulnerability in CA CleverPath Portal before maintenance version 4.71.001_179_060830, as used in multiple products including Bri
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
cleverpath · aion bpmDec 19, 2006
CVE-2018-18659
31Monitor
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- XXE
arcserve · udpOct 26, 2018
CVE-2018-18657
30Monitor
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
arcserve · udpOct 26, 2018
CVE-2018-18658
30Monitor
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
arcserve · udpOct 26, 2018
CVE-2025-34520
30Monitor
Arcserve UDP < 10.2 Authentication Bypass
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
arcserve · udpAug 27, 2025
CVE-2018-18660
24Monitor
An issue was discovered in Arcserve Unified Data Protection (UDP) through 6.5 Update 4.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
arcserve · udpOct 26, 2018
CVE-2025-34521
19Monitor
Arcserve UDP < 10.2 Reflected Cross-Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- RCE
- XSS
arcserve · udpAug 27, 2025